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Within  the  present  state  of  the  art  Inertial  instruments  can  achieve  high  reliability 
for  long  periods  of  time  only  by  redundancy.  By  suitable  geometric  configurations  it  is 
possible  to  extract  the  maximum  amount  of  reliability  and  accuracy  from  a  given  munber 
of  redundant  sing^e-degree-of-freedom  gyros  or  accelerometers. 

i 

Thin  paper  gives  'a  general  derivation  of  the  optimum  matrix  which  can  ut  applied  to  the 
outputs  of  any  combination  of  3  or  more  instruments  to  obtain  3  orthogonal  vector  compo¬ 
nents  based  on  their  geometric  configuration  and  error  characteristics.  The  result  is 
a  special  case  of  Kalman  filtering  theory.  Certain  combinations  of  4  or  more  instrument) 
have  the  capability  of  detectin'^  an  Instrument  malfunction,  those  of  5  or  more  have  the 
additional  capability  of  isolating  that  malfunction  to  a  particular  Instrument. 

This  paper  gives  particularly  attractive  configurations  of  4,  5  and  6  instruments.  Thes< 
combinations  are  capable  of  functioning  with  any  3  instruments,  of  detecting  a  malfunctloi 
with  any  4,  And  of  isolating  a  malfunction  with  ahy  5.  In  contrast,  arrangements  with  } 
redundant  instruments  whose  input  axes  are  parallel  to  only  3  orthogonal  axes  require 
i  in,  uments  to  detect  and  9  to  isolate  a  malfunction.  Also  given  are  the  matrices  to  b< 
applied  to  the  instrument  outputs  to  detect  and  Isolate  more  malfunctions.  The  instru¬ 
ment  configurations  shown  not  only  minimise  system  error  when  all  Instruments  are  oper¬ 
able,  but  when  all  but  3  have  malfunctioned  as  well. 

The  reliability  and  accuracy  of  these  redundant  configurations  are  compared  in  this  papei 
j  to  a  conventional  unit  of  3  orthogonal  instruments.  They  are  also  compared  with  j 
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redundant  sets  of  such  vuilts.  Consideration  is  gleen  to  cases  where  an  external 
reference  is  or  is  not  available  to  detect  and  isolate  malfunctions.  Although 
the  improvement  in  accuracy  is  minor,  the  Improvement  in  reliability  is  major. 

As  an  example,  if  no  external  reference  is  available  to  isolate  malfunctions,  then 
5  instruments  arranged  in  the  given  configuration  are  as  reliable  as  a  triple 
modular  redundant  combination  of  conventional  uni:s  of  3  instruments  (9  instru¬ 
ments  in  all) . 

Although  consideration  of  the  use  of  redundant  orthogonal  Instrument  triads 
is  common,  the  author  knows  of  no  proposal  that  more  than  3  instruments  be 
combined  in  a  single  package  with  axes  skewed  in  such  a  manner  that  each  makes 
an  equal  contribution  to  the  total  system  performance.  The  principles  contained 
in  the  paper  have  an  immediate  applicabtion  to  strapdown  attitude  reference 
packages  for  space  vehicles.  However,  they  are  also  applicable  to  glmballed 
stable  platforms  and  to  accelerometer  packages. 
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OPTIMUM  REDUNDANT  CONFIGURATIONS  OF  INERTIAL  SUISORS 
Joses  T.  Ephgrave 
MenLer  of  the  Technical  Staff 
Aerospace  Corporation 
Los  Angeles,  California  9004$ 

ABSTRACT  Although  consideration  of  the  use  of  redundant 

orthogonal  instrument  triads  Is  consnon,  the  author 

Vithin  the  present  state-of-the-art  Inertial  knows  of  no  proposal  that  store  than  3  Instruments 

Instruments  can  achieve  high  reliability  for  long  he  combined  In  a  single  package  with  axes  skewed  In 

periods  of  time  only  by  redundancy.  By  suitable  such  a  manner  that  each  makes  an  equal  contribution 

geometric  configurations  It  is  possible  to  extract  to  the  total  system  performance.  The  principles 

the  maximum  amount  of  reliability  and  accuracy  from  contained  In  the  paper  have  an  immediate  appllca- 
a  tflven  number  of  redundant  slngle-degree-of-freedom  tion  to  strapdovn  attitude  reference  packages 
gyros  or  accelerometers.  .  for  space  vehicles.  However  they  are  also  applic¬ 

able  to  glaballed  stable  platforms  and  to  acceler- 

Thls  paper  gives  a  general  derivation  of  the  ometer  packages, 

optimise  matrix  which  can  be  applied  to  the  outputs 
of  any  combination  of  3  or  store  Instruments  to  obtain 
3  orthogonal  vector  components  based  on  their  geo¬ 
metric  configuration  and  error  characteristics.  The  I.  Introduction 

result  Is  a  special  case  of  Kalman  filtering  theory. 

Certain  combinations  of  4  or  more  instruments  have  Redundancy  Is  a  technique  commonly  used  to 

the  capability  of  detecting  an  instrument  malfunction,  Insure  high  reliability  over  a  long  operating 

those  of  5  or  more  have  the  additional  capability  lifetime.  In  the  field  of  inertial  navigation, 

of  isolating  that  malfunction  to  a  particular  the  most  familiar  example  Is  the  SINS  which  uses 

Inst run ent.  three  complete  inertial  platforms.  Some  missile 

systems  have  a  redundant  gyroscope  mounted  on  a 

This  paper  gives  particularly  attractive  con-  single  platform,  but  use  It  primarily  for  pre¬ 
figurations  of  4,  5,  and  6  Instruments.  These  flight  azimuth  alignment.  The  advanced  8IN3 

combinations  are  capable  of  functioning  with  any  3  uses  a  fourth  or  “monitor"  gyro  to  continuously 

lnatrtssenta,  of  detecting  a  malfunction  with  any  4,  calibrate  the  drift  rate  of  the  tvo  horizontal 

and  of  Isolating  a  malfunction  with  any  5«  In  gyros.  It  still  relies  on  multiple  platforms 

contrast,  arrangements  with  redundant  Instruments  for  reliability, 

whose  input  axes  are  parallel  to  only  3  orthogonal 

axes  require  6  Instruments  to  detect  and  9  to  isolate  Host  present  analyses  indicate  that  tvo 

a  malfunction.  Also  given  are  the  matrices  to  be  redundant  attitude  reference  units  are  required 

applied  to  the  Instrument  outputs  to  detect  and  isolate  for  a  apace  navigation  system  having  high 
malfunctions  and  to  operate  the  system  after  one  or  probability  of  successful  operation  for  more 

more  malfunctions.  The  instrument  configurations  than  a  few  days.  This  paper  will  detail  a  core 

shown  not  only  minimize  syatem  error  when  all  lnstru-  efficient  method  of  obtaining  reliability  through 

Bents  are  operable,  but  when  all  but  3  have  mal-  redundant  gyroscopes  in  a  single  strapdovn 

functioned  as  well.  attitude  reference  Unit.  The  same  principles 

apply  to  glaballed  gyros  and  to  accelerometers. 

The  reliability  and  accuracy  of  these  redundant 
configurations  are  compared  in  this  paper  to  a  con¬ 
ventional  unit  of  3  orthogonal  Instruments,  They 

are  also  coepared  with  redundant  sets  of  such  units.  II.  ttiltl-gyro  Analysis 

Consideration  is  given  to  cases  where  an  external 

raf« :nee  Is  or  la  not  available  to  detect  and  Isolate  A  general  block  diagram  of  a  ntrapdovn 

malfunctions.  Although  the  Improvement  in  accuracy  attitude  reference  umit  Is  shovu  In  Figure  1. 
is  minor,  the  Improvement  In  reliability  la  major. 

As  an  example,  If  no  external  reference  la  available 
to  Isolate  malfunctions,  then  $  Instruments  arranged 
in  the  given  configuration  are  as  reliable  as  a 
triple  modular  redundant  combination  of  conventional 
units  of  3  instrument*  (9  Instrument*  In  all). 
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The  symbols  used  In  Figure  1  have  the  following 
significance: 

•  »  vehicle  angular  rate  vector 

•  '  ■  indicated  angular  rate  vector 
a  *  gyro  error  torque  vector 

9  m  gyro  output  algnal  vector 

Y  *  indicated  gyro  error  torque  vector 

A  «  net r lx  relating  rotations  about  vehicle 
axes  to  those  about  gyro  axes 

B  *  Matrix  relating  gyro  output  rates  to 
indicated  vehicle  rates 

C  «  Matrix  relating  gyro  output  rates  to 
Indicated  gyro  error  torques 

h  -  gyro  angular  momentum 

0(a)  »  gyro  dynamic  gain 

K(s)  »  feedback  gain 

Die  general  Matrix  equatlona  which  should  hold 
for  any  configuration  are: 


BA  -  I 

(1) 

CA  -  0 

(2) 

The  loop  in  Figure  1  can  be  reduced  to: 

hu'  -  B  —55 —  (a)*u  +  a)  *  hw  +  Bs 

(3) 

1  +  OK 

v  .  c  (Ahu  +  a)  «  C« 

T  1  +  OK 

W 

The  approximations  shown  above  are  based  on  system 
design  which  makes  GK  »1  in  the  frequency  range  of 
interest. 

For  a  conventional  gyro  package  with  3  ortho¬ 
gonal  input  axes,  the  matrices  are: 


.  Si*  Matrix  A  relatlrg  rotations  about  the  vehicle 
axes  to  those  about  the  gyro  axes  is  fixed  by  the 
physical  arrangement  of  the  gyro  package.  The  matrix 
B  relating  gyro  output  rates  to  indicated  vehicle 
rates  should  ba  chosen  to  Minimize  system  error  due 
to  gyro  drifts  and  Malfunctions.  .2. 


The  mean  square  error  la 


B2-<aBBa>  -  tr[S  B  <«?>] 


where  the  brackets  Indicate  an  ensemble  average, 
the  tilde  (**),  the  matrix  transpose,  and  tr, 
the  trace  or  sun  of  the  diagonal  elements  of  this 
matrix. 

Minimizing  E2  subject  to  the  constraint 
that  BA  -  I  gives  the  following  matrix  equation 

B  <*t>  -  AA  •  0  (7 

where  A  is  a  tagrangian  matrix  multiplier.  The 
solution  of  the  equations  la  identical  to  the 
Kalman  theory  results. 


A  -  [a  <«r>"1A]"1 
B  -  [a  <S?>‘1a]"1A  <t«  >  “1 


Substituting  Equation  (9)  in  Equation  (6)  gives 

E2  -  trA  (10) 

as  the  minimum  error  possible  with  a  physical 
arrangement  represented  by  the  matrix  A  and  gyro 
errora  represented  by  the  vector  a. 

If  the  gyro  errors  are  Independent  and 
have  equal  variances  (e2)  from  zero  means,  then 

<s*>  -  t2I  (U) 


B  -  [a  A^A 
E2  -  e2tr  [a  a]  "1 


The  value  of  E?  nay  be  further  minimized  by  a 
physical  arrangement  of  n  gyros  which  makes  the 
columns  of  the  A  matrix  orthogonal.  Since  each 
row  of  A  represents  a  set  of  direction  cosines. 
It  follows  that 


A**!1 


B  ■  *  A 

0  n 


•  2  2  J 
IL  m  t  • 
o  s 


a  *»■»/* 


(1 


f • 


For  n  >  3»  the  requirement  that  the  columns  of 
A  he  orthogonal  does  not  uniquely  define  a  configura¬ 
tion  for  a  multi-gyro  package.  It  lc  desired  to 
Minimize  system  errors  after  all  but  3  gyros  have 
Malfunctioned  as  veil  as  vhen  all  n  are  operating. 

The  author  knows  of  no  general  method  of  obtaining  an 
optimum  configuration.  However,  sysmetry  has  been 
used  to  discover  configurations  which  appear  to  be 
optimum  for  the  cases  of  k,  5,  and  6  gyros. 

The  choice  of  a  matrix  B  to  use  after  one  or 
More  gyros  have  malfunctioned  is  based  on  Equation 
(9)  except  that  the  covariance  matrix  <«i>  is  modi¬ 
fied  by  placing  infinitely  large  values  in  the  terms 
corresponding  to  the  malfunctioned  gyros.  Identical 
results  can  be  obtained  by  modifying  the  matrix  A 
by  replacing  the  direction  cosines  of  the  malfunc¬ 
tioned  gyros  by  7eros. 

Hie  matrix  C  relating  gyro  output  rates  to 
indicated  gyro  drift  errors  should  be  chosen  to 
extricate  the  maximum  amount  of  information  on  gyro 


drifts  from  the  redundant  information  available. 

The  mean  square  error  in  the  estimated  gyro  error  is 

F2  -  <(«  -  Y)(*  -  Y>  -  tr[(l  -C)(I-C  )<**>]  (17) 

Minimizing  F2  subject  to  the  constraint  CA  ■  0 
gives  the  following  matrix  equation 

(I  -  C)  <*«>  -  A'X  «  0  (18) 

where  A'  is  another  Lagrangian  matrix  multiplier. 

The  solution  of  the  equation  la  similar  to  that  for 
the  matrix  B. 

A'  -  A  |X  <*f>_1A j  ~l  (19) 

C  •  I  -AB  (20) 

The  matrix  C  has  the  additional  properties 
BC  »  CA  -  0  (21) 

C2  ■  C  (22) 


Vith  4  or  more  gyros  in  operation,  a  malfunction 
will  cause  one  or  more  components  of  y  to  exceed  a 
pre-set  threshold.  With  5  or  more  gyros  it  is  pos¬ 
sible  to  Isolate  the  malfunction  to  a  particular 
gyro  which  corresponds  to  the  maxlmua  component  of  y. 

III.  Other  Applications 

The  above  analysis  for  strapdown  gyros  is 
directly  applicable  to  either  strapdown  or  glmballed 
actelerometer  packages  as  well.  The  appropriate 
meaning  for  the  symbols  in  Figure  1  for  both 
pendulous  and  test-moss  acceleroaeters  are  given 
in  Table  I  below. 


ACCELEROMETER 

SYMBOL 

GYROSCOPE 

TORStUg 

BALANCE 

FORCE 

BALANCE 

m 

angular 

rate 

acceleration 

acceleration 

< 

error 

torque 

error  torque 

error  force 

a 

output 

torque 

output  torque 

output  force 

Y 

indicated 

Indicated 

indicated 

error 

torque 

error  torque 

error  force 

b 

angular 

momentum: 

penduloslty 

teat  mass 

0(a) 

gyro  gain 

accelerometer 

gain 

accelerometer 

gain 

TABLE  1. 


By  partially  caging  the  gyros,  redundancy 
can  also  be  used  in  a  glmballed  stable  platform 
as  shown  in  Figure  2. 

The  additional  symbols  used  In  Figure  2 
have  the  following  significance 

to  ■  platform  drift  rate  vector 

K^(s)"  platform  feedback  gain 

£,(»)“  gyro  torque  feedback  gain 

The  loop  in  Figure  2  can  be  reduced  to: 


hto  -  ytt^<5T  <•  -  v»o  *  (23) 

K-0  KJ3 

v  -  itjccft  -  r-ngo  c>«-rnyj  *  *  *  (*> 

where  as  before  the  approximation*  are  based  on 
system  design  which  makes  CK  »  1  In  the  fre¬ 
quency  range  of  interest.  As  indicated,  the 
effects  of  redundancy  on  system  mechanisation  are 
different  for  glmballed  systems,  but  much  of  the 
analysis  and  results  are  identical  to  that  for 
strapdown  systems . 


IV.  Four-Oyro  Configuration 

The  most  syassetrlc  configuration  of  four 
gyro  input  axes  is  the  normals  to  the  faces  of 


•—'I* 


t- 


a  regular  tetrahedron.  The  angle  between  any  two 
Input  axes  would  then  be  109°  28'  (arctan  -  2  *72 ) . 
The  directions  of  the  gyro  output  axes  are  to  a  cer¬ 
tain  extent  arbitrary,  but  are  often  chosen  either 
to  minimize  acceleration  sensitive  errors  or  s imply 
for  packaging  reasons.  The  direction  cosines  of  the 
gyro  axes  for  one  such  configuration  (Figure  3)  are 
given  In  Table  II  below. 


Cyro  No. 

Incut  Axis 

Output  Axis  Spin  Axis 

X  Y 

z 

X 

Y 

Z  X  Y 

Z 

1 

1  0 

0 

0 

0 

H 

1 

O 

H 

0 

2  - 

.333  .943 

0 

0 

0 

-1  ->943  -.333 

0 

3  - 

.333  -.471 

.816 

.816 

\o 

CO 

r 

0  A71  -667 

.577 

4  -.333  -471  -816 

-.816 

£16 

0  .471  £67 

-.577 

TABLE  II. 


V.  Four-Gyro  Analysis 


For  the  four-gyro  configuration  the  matrix 
relating  rotations  about  the  vehicle  axes  to  those 
about  gyro  axes  is: 


A  - 


1 

•  333 
.333 

•  333 


0 

.943 

-.471 

-.471 


0 

0 

.816 

.816 


(85) 


The  matrix  which  relates  gyro  cutput  rates  to 
Indicated  vehicle  rates  when  all  gyros  are  operating 
properly  Is  given  by 


•75 

0 

0 


-85 

.707 

0 


-.85 

-354 

.612 


-.85 

-354 

-.612 


(86) 


Assisting  that  gyro  No.  1  malfunctions,  the 
error  torque  vector  y  »  Cb  will  exceed  a  thres¬ 
hold.  With  external  Instrumentation  such  as  a 
star  tracker  to  localize  the  malfunction,  the  bad 
gyro  can  be  switched  out  of  the  system  by  changing 
matrix  B  as  shown  below. 


0  -1  -1  -1 

0  .707  -354  -.354  |  (88) 

0  0  .612  -.612 


With  only  3  gyros  operating,  an  internal  check 
no  longer  exists. 


VI.  Five-Gyro  Configuration 

The  most  effective  configuration  would  have 
no  3  gyros  in  the  same  plane  so  that  the  package 
is  still  useful  after  2  gyro  failures.  For 
reasons  of  symmetry,  a  configuration  in  which  all 
3  input  axes  make  equal  angles  with  a  given  axis 
is  chosen.  The  specific  angle  which  the  input . 
axes  make  with  the  central  axis  la  chosen  to  as 
to  minimize  the  effect  of  individual  gyro  errors 
on  total  system  errors  for  the  worst  case  when  2 
gyros  are  inoperative. 

The  angle  which  does  optimize  the  configura¬ 
tion  is  54°  44’  ( arctan )  with  the  axle  of 
symetry.  The  resulting  angle  between  input  axe3 
is  57°  88'.  The  direction  cosines  of  the  gyro 
axes  for  one  such  configuration  (Figure  4)  arc 
given  in  Table  III  below. 


A  check  can  be  made  on  the  gyro  cluster  by  com¬ 
bining  the  output  of  the  4  gyros  in  such  a  way  that 
the  physical  angular  rates  cancel  and  the  check  vector 
depends  only  on  the  gyro  torques.  The  appropriate 
Check  matrix  Is: 


Cyro  No 

Input  Axis 

Output  Axis  Spin  Axis 

•  X  Y  Z 

X  Y 

Z  X  Y  Z 

1 

.577  .816  0 

0  0 

1  .816-577  0 

2 

.577  .858  .777 

400 -.916 

0  .712  .311  -.630 

3 

.577-661  hQo 

.753  #8 

0-316  .361  .877 

4 

•577  ^661  -400 

.753  #8 

0  .316 -.361  JBTT 

5 

.577  .858  -777 

.400  -  .916 

0  -.712  -.311  -6y> 

TABLE  III. 

VII.  Five-Gyro  Analysis 
For  the  five  -gyro  configuration  the  matrix 


.85 

.85 

.85 

.85 

relating  rotations  about  the  vehicle  axes 
about  gyro  axes  is: 

.85 

.85 

.85 

•85 

(87) 

.83 

.85 

.85 

.85 

.85 

.85 

.85 

.85 

• 

• 

-  4  - 

•  «»* **»»a**  a  ***-•  » 


577 

.816 

0 

577 

.252 

.777 

577 

-.661 

.480 

577 

-.661 

-.480 

577 

.252 

-777 

Use  matrices  which  rela'-e  gyro  output  rates  tc 
Indicated  yehlcle  rates  and  irror  torques  vher.  t.Xi 
gyros  are  operating  properly  are: 


’.346 

.346 

.346 

.346 

6  I 

.490 

.151 

-396 

-.396 

.153  7 (30) 

0 

.4c6 

.288 

-.288 

-.4'o6 

P4 

-324 

.124 

.124 

-.324" 

-•324 

> 

-324 

.124 

.124 

-32'* 

-.324 

.124  -31) 

.124 

.124 

-.324 

.4 

-.324 

- .  394 

I,'"'' 

.  24 

.124 

— 3?4 

.4 

Asr.’sulng  t.V.at  gyre  Wo.  X  ’lalfunc'  Ions,  rule  cr 
■ore  of  the  element:*  >•(  the  check  vector  y  •  Oo 
exceed  a  predet-rotlc-.-d  threshold.  "r.e  flr»t  element 
will  be  the  largest  ir.c\  there  fore  the  cor?,esj>anding 
gyro  should  be  switched'  uu’  of  the  system  by  changHr-i. 
■atrl~.es  B  and  C  as  shown  below. 


.627 

.239 

ON 

CM 

.627 

.548 

-.548 

-.548 

.548 

.466 

.288 

-288 

-.466 

-.809 

.309 

.309 

-.809! 

.138 

-.224 

.224 

-.138 

-.224 

.362 

-362 

.224 

.224 

•  .362 

.362 

-.224 

-.138 

.224 

-.224 

.138 

It  Is  still  josslble  to  detect  a  malfunction. 
Jovcvcr,  It  i<c.  no  longer  be  localized  to  a  single 
ftrX'Utt 'ipe  without  the  aid  o)  external  lnstrumentatlr  j 
such  as  a  star  tracker. 


If  2  adjacent  gyros  such  as  Nos.  1  and  4 
*alf unction,  the  matrix  which  eliminates  their 
effect  is 


1.253 

0 

0 

1.253 

-.196 

0 

0 

-886 

.644 

0 

0 

-.644 

If  2  non-adjacent  gyros  such  as  Wo.  2  and  5 
ms1 function,  the  matrix  which  eliminates  their 
Is 


.775  0  .479  .479  0 

"  *^77  0  -  339  -339  0 

-/ 


0  1.042  -1.042 


fill  Oix-C.r  j  Configuration 


Considerations  similar  to  those  discussed  for 
the  four-  snd  five-gyro  attitude  reference  units 
govern  the  choice  of  a  configuration  for  6 
gyroscopes.  The  resulting  configuration  Is  one 
ir.  which  all  Input  axes  make  angles  of  elv'nrr 
6’°  26 :  (arctan  2)  or  116°  34’  with  each  u'.'-nr. 
Geometrically  the  input  axes  are  perpendicular 
to  the  face/!  of  a  regular  dodecahedron.  The 
direction  cosines  of  the  gyro  axes  for  one  such 
configuration  (figure  3)  are  given  In  Table  IV 
below. 


Input  Axis  Output  Axis 


Gyro  Ko.  X  Y  2  X  Y  Z  X  i  Z 
1  .795  .607  0  0  0  1  .607 -.795  0 

•795  -304  .526  0—866  -.5  .607  .397  -.688 

•795  -304  -.526  0  .866  -.5  £07  .397  -688 

-108  .982  0  0  0  1  -.982  -188  0 

-180  -491  .851  0  -866  -5  -982  .094  -162 

-I68-A91-85I  0  £66  -.5  -.982  .094  .162 

TABU!  IV. 


Spin  Axis 
X  i  t 


IX.  Six-Gyro  Analysis 


for  the  elx-gyro  configuration  the  matrix 
relating  rotations  about  the  vehicle  axes  to  those 
about  gyro  axes  Is: 


.795 

.607 

0 

.795 

-.304 

.526 

.795 

-.304 

-.526 

-.188 

.982 

0 

-.188 

-.491 

.851 

-.188 

-.491 

-.851 

(36) 


Die  matrices  vhich  relate  gyro  output  rates  to 
indicated  vehicle  rates  and  error  torques  vhen  all 
gyros  are  operating  properly  are: 


•397 

.397 

.397 

-.094 

-.094 

-.094 

,304  ■ 

OJ 

• 

■ 

-.152 

.491 

-.246 

-.246 

(37) 

0 

.263 

-263 

0 

.425 

-.425 

•5 

-.224 

-.224 

-.224 

.224 

.224 

-.244 

.5 

-.224 

.224 

-.224 

.224 

-.224 

-.224 

•5 

.224 

.224 

-.224 

-.224 

.224 

.224 

.5  -.224 

-.224 

.224 

-.224 

.224 

-.224 

•  5 

-.224 

.224 

.224 

-.224 

-.224 

-.224 

•5 

Assuming  the  gyro  No.  1  malfunctions,  one  or 
■ore  of  the  elements  of  the  check  Vector  y  ■  Qj  vill 
exceed  a  predetermined  threshold.  Hie  first  element 
vill  he  the  largest  and  therefore  gyro  No.  1  should 
be  svltched  out  of  the  system  by  changing  matrices 
B  and  C  as  shown  below. 


0  .575  .575 

.083 

-.272 

-.272 

0-.016  -.016 

.627 

-.381 

-.381 

0  .263  -.263 

0 

-.425 

-.425 

i  -.447  -.44? 

-.447 

.447 

.447’ 

0  .4  -.324 

.124 

-.124 

.324 

0  -.324  .4 

.124 

.324 

-.124 

0  .124  .124 

.4 

.324 

.324 

0  -.124  .324 

.324 

.4 

.124 

0  .324  -.124 

.324 

.124 

.4 

(39) 


(1*0) 


It  Is  still  possible  to  Isolate  the  second 
gyro  malfunction  by  a  method  similar  to  that  used 
to  Isolate  the  first. 

If  2  gyros  such  as  No.  5  and  6  have  failed, 
the  matrix  which  eliminates  their  effect  Is 


.455 

•397  .397 

O 

1 

0 

0 

.455  - 

.152  -.152 

.643 

0 

0 

0 

.951  -.951 

0 

0 

0 

• 

The  check  matrix  Is  now 

'  .362 

-.224  -.224 

-.362 

0 

0* 

-.224 

.138  .138 

.224 

0 

p 

-.224 

.138  .138 

.224 

0 

0 

-.362 

.224  .224 

.362 

0 

0 

.309 

-.809  .809 

.309 

1 

0 

.309 

.809  -.609 

.309 

0 

1 

(1*1) 


(42) 


The  check  procedure  allows  malfunction  detection 
but  not  isolation  vhen  only  4  gyros  are  operative. 

If  3  adjacent  gyros  usch  as  No.  1,  2,  and  3 
malfunction  and  external  methods  are  available 
to  isolate  the  last  malfunction,  then  the  system 
can  still  be  operated  with  the  matrix 


0 

0 

0 

-1.777 

-1.777  -1.777 

0 

0 

0 

.679 

-.339 

-.339 

0 

0 

0 

0 

.588 

-.588 

(43) 


Similarly  If  3  non-edjacent  gyros  such  as  No.  4, 
5,  and  6  malfunction,  the  appropriate  matrix  if 


*456" 


.419 

1.090 

0 


.419  .419 
.549  -.549 
.951  -.951 


0  0  0 
0  0  0 
0  0  0 


(44) 


X.  Reliability  Analysis 


Tor  a  configuration  of  n  +  *  equal  elements, 
only  m  of  vhich  are  required  for  operation,  the 
probability  of  successful  operation  Is 


-  6  - 


A 


A 


o 


0 


p  .y  H-,  P  a .  P  )* 

Pmn  ki  (W+n-k)  J  P1  U  pl; 

where  P  1*  the  probability  of  auccess  of  a  aingle 
element.  If  the  failure  rate  equals  a  constant  X, 
then 

Px  *  exp  (-Xt) 


(1*5) 


(46) 


For  a  multi-gyro  attitude  reference  unit  in  which 
external  sensors  can  resolve  malfunctions  to  a 
particular  gyro,  successful  operation  of  the  unit  is 
possible  as  long  as  3  or  more  gyros  are  operating.  In 
this  case  m  »  3.  If  no  external  aid  is  available, 
the  unit  itself  can  resolve  malfunctions  as  long  as  4 
or  more  gyros  are  operational.  In  this  case  a  »  4. 

For  comparison,  the  reliability  of  N  conventional 
3-gyro  attitude  reference  units  in  which  only  one  gyro 
on  each  axis  la  operating  at  a  time  is  given  by 


‘3* 


r  H-l 


exp  (-3  Xt) 


(47) 


The  above  equation  implies  that  external  methods  are 
available  tc  detect  and  isolate  a  malfunction.  A 
method  which  does  not  require  external  aid  is  triple 
modular  redundancy.  For  a  TMR  configuration  3  gyros 
on  each  orthogonal  axis  are  required.  All  9  gyros 
operate  concurrently  and  malfunctions  are  detected  by 
comparing  the  outputs  of  each  set  of  3.  When  the 
output  of  a  gyro  varies  by  more  than  a  preuet  toler¬ 
ance  from  that  of  the  other  2  corresponding  gyros, 
its  output  is  Ignored.  The  failure  of  2  gyros  on  a 
single  axis  in  required  to  cause  the  failure  of  the 
total  attitude  reference  unit.  For  TOR  the  relia¬ 
bility  is  given  by 


TOR 


<V3 


3  exp  (-2Xt)  -2  exp  ( 


(W) 


„-6 


Assuming  a  failure  rate  of  X  •  $5.6  x  10" 
failure/hour  or  an  MTBF  of  750  days,  the  times  at 
which  a  reliability  of  0.99  and  0.95  are  reached  are 
given  in  Table  V  below. 


Ho. 

Total 

No. 

V  -  0.99 

P  ■ 

0.95 

Of 

Units 

Of 

Gyros 

With  Aid  v/oAid  With  Aid  v/oAld 

• 

1 

-  7.5  days 

* 

38  days 

1 

3 

-  2.5 

- 

13 

1 

4 

32  days  1.9 

77  days 

9.6 

1 

5 

84  25 

158 

60 

1 

6 

142  66 

238 

124 

2 

6 

63 

147 

- 

3 

9 

219  26 

399 

60 

-7 


In  Table  V  the  No.  of  Units  refers  to  the 
number  of  separate  attitude  reference  units.  In  ■ 
the  case  of  2  or  3  each  unit  is  a  conventional 
three  gyro  package  whose  input  axes  are  ortho¬ 
gonal  to  each  other  and  parallel  to  the  correa- 
pondlng  axea  of  the  other  units.  With  and  vlthout 
aid  refers  to  whether  or  not  an  external  device 
such  as  a  star  tracker  is  available  to  localize 
a  malfunction  to  a  particular  gyro.  With  non- 
redundant  systems,  the  external  device  is  of  no 
use  since  no  spare  is  available  to  replace  a 
malfunctioned  gyro.  In  the  cases  of  2  or  3  con¬ 
ventional  units  vith  external  aid  to  localize 
malfunctions,  each  gyro  is  considered  to  be 
individually  replaceable  and  only  one  gyro  on  each 
axis  is  operable  at  a  time.  In  the  case  of  3 
units  vlthout  aid  the  gyros  are  used  in  a  TMR  mode. 


XI.  Error  Analysis 

Based  on  Equation  (6)  Tor  multi-gyro  attitude 
reference  units,  the  effective  drift  rate  is  given 
in  Table  VI  below  normalized  so  that  the  drift 
of  a  conventional  three-gyro  unit  is  unity. 


x 


x 


the  equations  below. 


Humber  of  Gyro*  Error 


Total 

Operating 

Mean  Square 

RM3 

3 

3 

1 

1 

4 

4 

0.75 

O.87 

3 

1.5 

1.22 

5 

5 

0.6 

0.78 

4 

0.9 

0.95 

3 .  .... 

2.2 

1.48 

6 

6 

0.5 

0.71 

5 

0.67 

0.82 

4 

1 

1 

_ 

1  -  - 

_ _ 

1.58 

TABLE  VI. 


For  the  ca set  of  fire-  and  six-gyro  unit*  with 
only  3  gyros  operating,  there  is  a  variation  in 
total  drift  rate  depending  upon  whether  the  active 
gyro  input  axes  are  adjacent  or  non-ad Jacent.  The 
value  given  for  the  Bean  square  error  is  an  average 
of  the  two.  Both  cases  are  equally  likely. 

It  Bay  he  noted  that  in  no  caae  does  the  error 
of  a  aultl-gyro  unit  exceed  that  of  a  conventional 
three-gyro  unit  when  4  or  nore  gyvoe  are  operating. 


XII.  Adaptive  Syatew  Analysis 

Since  the  value  of  the  B  aatrix  is  baaed  on 
estimated  relative  instrument  errors  and  the  check 
rector  y  Is  itself  an  estimate  of  these  errors,  the 
development  of  an  adaptive  system  mcchimUBtion  is 
suggested.  Unfortunately  such  an  adaptive  system  in 
which  the  weighting  factors  are  dependent  on  system 
'outputs  is  non-linear  and  not  amenable  to  the  known 
techniques  of  linear  system  analysis. 

Qualitatively  it  is  apparent  that  the  efficiency 
of  a  non-linear  adaptive  system  depends  on  the  degree 
of  redundancy  available.  A  system  of  4  sensors 
provides  no  information  to  resolve  individual  errors; 
a  system  of  5  only  enough  to  resolve  errors  so  large 
aa  to  be  termed  malfunctions.  A  system  of  6  is 
probably  the  minimum  degree  of  redundancy  required 
to  use  an  adaptive  system. 

A' likely  algorithm  for  an  adaptive  system  would 
be  to  periodically  recompute  the  matrix  B  based  on 


C  -  I  -  AB  (50) 


where  Q  is  a  diagonal  matrix  with  elements  equal 
to  e2(i)  +•  y2(1).  The  matrix  Q  replaces  the 
covariance  matrix  <tt>.  The  value  e(i)  represents 
the  a  priori  estimate  of  instrument  error  while 
Y(i)“ls  the  current  estimate  based  on  Equation  (4). 

With  insufficient  redundancy  or  particular 
combinations  of  errors  the  above  procedure  may 
lead  to  instability,  in  oth.-r  cases  to  a  stable 
but  non-optimum  result.  As  a  result  of  the  non¬ 
linearity  of  the  problem,  drawing  quantitative 
stability  boundaries  and  determining  the  behavior 
for  generalized  error  inputs  requires  either  a 
great  deal  of  numerical  calculations  or  an  advance 
in  the  analytical  state-of-the-art.  This  problem 
la  a  variant  of  the  third  unsolved  problem  out¬ 
lined  by  R.  C.  X.  Lee  lr.  his  book  Optimal 
Estimation,  Identification,  and  Control  (HIT  Press, 
Cambridge,  1964,  p.  139)* 


XIII.  Conclusions 

1.  Using  redundant  gyros  in  an  optimal 
configuration  In  a  single  attitude-reference  unit 
la  a  more  efficient  method  of  increasing  relia¬ 
bility  than  redundant  conventional  three-gyro  units. 

2.  Four  or  more  gyros  are  required  to  detect 
an  individual  lnstnssent  failure  without  an 
external  reference. 

3.  Five  or  more  gyros  are  required  to 
localize  a  malfunction  to  a  particular  instrument 
so  that  it  ray  be  switched  out  of  the  system  and 
prevent  system  failure. 

4.  Six  or  more  gyros  are  probably  required 
to  Implement  an  adaptive  system  which  would  com¬ 
pensate  for  large  Instrument  errors  as  well  as 
complete  failures. 

5.  The  same  principles  may  be  used  for  any 
set  of  slngle-dejree-of-freedom  sensors  used  to 
detect  a  vector  quantity. 

6.  Although  the  primary  purpose  Is  to 
Increase  reliability,  redundancy  also  reduces 
total  system  error. 
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nOURK  1.  Block  Diagram  of  Strapdovn  ARU 


FIGURE  2.  Block  Diagram  of  Stable  Platform 
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FIGURE  3-  Four-Gyro  Configuration 


FIGURE  k.  Five-Gyro 
Configuration 


FIGURE  5.  Six-Gyro  Configuration 


